Description
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PixelYourSite Professional | Boost | ≤ 2.0.4 | — |
Critical · 9.3
CVE-2026-32555
EUVD-2026-65162GHSA-wh38-69hj-4c92
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability
Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by Patchstack